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WHAT IS CLAIMED IS: 

1 . A method for securely controlling the printing of a plaintext 
document generated by a first source, the method comprising the steps of: 

receiving at a printer via a first communication channel a first l^ey 
sent by the first source; 

obtaining at the printer a second key based on communication 
between the printer and a second source; 

receiving at the printer from the second source via a second 
communication channel an encrypted version of the plaintext document; 

decrypting at the printer using the first and second l<eys the 
encrypted version of the plaintext document to obtain the plaintext document at 
the printer; and 

printing with the printer the plaintext document obtained at the 
printer via the decrypting at the printer of the encrypted version of the plaintext 
document. 

2. A method as recited in claim 1 , wherein the second communication 
channel is an electronic communication channel. 

3. A method as recited in claim 2, wherein the second communication 
channel is a secure electronic communication channel. 

4. A method as recited in claim 2, wherein the second communication 
channel is a non-secure electronic communication channel. 

5. A method as recited in claim 2, wherein the encrypted version of 
the plaintext document cannot be decrypted at the second source to obtain the 
plaintext document. 
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6. A method as recited in claim 5, further comprising the step of 
ensuring that the printer can only print a predetermined number of copies of the 
plaintext document obtained at the printer via the decrypting at the pnnter of the 
encrypted version of the plaintext document. 

7. A method as recited in claim 6, wherein the predetermined number 

is one. 



8. A method as recited in claim 7, further comprising storing in a 
memory in the printer the first and second l^eys, the encrypted version of the 
plaintext document, and the plaintext document obtained at the printer via the 
decrypting at the printer of the encrypted version of the plaintext document, and 
subsequent to the printing of the predetermined number of copies of the plaintext 
document obtained at the printer via the decrypting at the printer of the encrypted 

U version of the plaintext document 1 ) deleting from the memory the plaintext 

H document obtained at the printer via the decrypting at the printer of the encrypted 

liJ 

C5 version of the plaintext document and 2) deleting from the memory one of the 

first key, the second key, and the encrypted version of the plaintext document. 

9. A method as recited in claim 6, further comprising obtaining 
electronically at the printer the predetermined number from the second source. 



1 0. A method as recited in claim 2, further comprising performing a first 
encryption operation on the plaintext document thereby creating an encrypted 
form of the plaintext document and subsequently performing a second encryption 
operation on the encrypted form thereby creating the encrypted version of the 
plaintext document. 
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11. A method as recited in claim 1 0, wherein the first encryption 
operation is performed at the first source, the encrypted form is sent 
electronically from the first source to the second source, the encrypted form is 
stored at the second source, the second source does not have the ability to 
decrypt the encrypted form, and the second source performs the second 
encryption operation on the encrypted fomn. 

12. A method as recited in claim 1 1 , wherein the second source is a 
server and the second l<ey is generated at the server and sent to the printer via 
the second communication channel. 

1 3. A method as recited in claim 1 1 , wherein the second source and 
the printer communicate to mutually agree on the second key. 

14. A method as recited in claim 6, wherein the second source 
maintains an audit record of the number of copies printed at the printer of the 
plaintext document obtained at the printer via the decrypting at the printer of the 
encrypted version of the plaintext document. 

1 5. A method as recited in claim 2, further comprising printing the 
plaintext document obtained at the printer via the decrypting at the printer of the 
encrypted version of the plaintext document to include forensic evidence of the 
authenticity of the printed plaintext document. 

1 6. A system for securely transmitting and printing documents 
comprising: 

a computer system that encrypts a plaintext document using a first 
key thereby creating an encrypted document, the computer system including 
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means for electronically transmitting the encrypted document via a first 
communication channel; 

a server connected to the first communication channel to receive 
the encrypted document from the computer system, the server including memory 
for storing the encrypted document, a processor for encrypting the encrypted 
document using a second key thereby creating a double-encrypted document, 
means for electronically transmitting the double-encrypted document via a 
second communication channel; 

a printer connected to the second communication channel, the 
printer having means for communicating with the server via the second 
communication channel to determine the second key and to receive the double- 
encrypted document from the server, means for receiving the first key from the 
computer system upon request, means for decrypting the double-encrypted 
document using the first and second keys to obtain the plaintext document, and 
means for printing a only a predetermined number of copies of the plaintext 
document obtained from the decrypting of the double-encrypted document by the 
printer. 

1 7. A method for securely controlling the recording of an unencrypted 
digital content generated by a first source, the method comprising the steps of: 

receiving at a recording device via a first communication channel a 
first key sent by the first source; 

obtaining at the recording device a second key based on 
communication between the recording device and a second source; 

receiving at the recording from the second source via a second 
communication channel an encrypted version of the unencrypted digital content; 

decrypting at the recording device using the first and second keys 
the encrypted version of the unencrypted digital content to obtain the 
unencrypted digital content at the recording device; and 
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recording on a recording medium with the recording device the 
unencrypted digital content obtained at the recording device via the decrypting at 
the recording device of the encrypted version of the unencrypted digital content. 
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